Claude for Chrome

(www.anthropic.com)

795 points davidbarker | 1 comments | 26 Aug 25 19:01 UTC | HN request time: 0s | source

Show context

rustc ◴[26 Aug 25 19:10 UTC] No.45030857[source]▶

> Malicious actors can hide instructions in websites, emails, and documents that trick AI into taking harmful actions without your knowledge, including:

> * Accessing your accounts or files

> * Sharing your private information

> * Making purchases on your behalf

> * Taking actions you never intended

This should really be at the top of the page and not one full screen below the "Try" button.

replies(7): >>45030952 #>>45030955 #>>45031179 #>>45031318 #>>45031361 #>>45031563 #>>45032137 #

mikojan ◴[26 Aug 25 19:43 UTC] No.45031361[source]▶

>>45030857 #

Can somebody explain this security problem to me please.

How is there not an actual deterministic traditionally programmed layer in-between the LLM and whatever it wants to do? That layer shows you exactly what changes it is going to apply and it is going to ask you for confirmation.

What is the actual problem here?

replies(2): >>45033117 #>>45037168 #

1. knowannoes ◴[27 Aug 25 09:15 UTC] No.45037168[source]▶

>>45031361 #

As soon as you send text to a text completion API, local or remote, and it returns some text completion that some code parses, finds commands and runs them, all bets are off.

All the semantics around "stochastic (parrot)", "non-deterministic", etc tries to convey this. But of course some people will latch on to the semantics and triumphantly "win" the argument by misunderstanding the point entirely.

Automation trades off generality. General automation is an oxymoron. But yeah by all means, plug a text generator to your hands off work flow and pray. Why not? I wouldn't touch such a contraption with a 10 feet pole.

↑